lancestout

27 ms·

1. 1.▲
   by lancestout 13y ago

   There's the /.well-known/browserid [1] file that can be used to delegate a domain to another identity provider. The main thing is that while Persona talks about email verification, the protocol doesn't require that email
2. 2.▲
   by lancestout 13y ago

   The decision to only support Unicode 3.2 is simply because the StringPrep framework [1] (which XMPP's nodeprep and various other protocols use) is forever tied to that version of Unicode. Current work is on the PRECIS framework [2] whi
3. 3.▲
   by lancestout 13y ago

   This is actually goes to the point behind the http://nodesecurity.io initiative - building up the security mindedness of the node community by auditing npm modules for various vulnerabilities and making it easy to responsibly disclose vul
4. 4.▲
   by lancestout 13y ago

   Yes, it is. The very start of a session is usually synchronous (authentication, etc), but after that it is async. Request/response commands have an id value to link the request to the response so it doesn't matter if other data arrives firs
5. 5.▲
   by lancestout 13y ago

   Yeah, there's http://xmpp.org/extensions/xep-0286.html which discusses some ways to mitigate the power issue, but, from what I understand, we never got much feedback from mobile developers about it. In particular there are several extensi